[dspillett]

MS push having automatic unattended updates turned on. Azure complains without end if you don't, sometimes Defender (which Azure complains about if you don't have installed) updates override you having turned them off when it updates.

There being a bug in the package may be an Ubuntu thing, me losing time to diagnosing problems caused by the update getting applied without my knowledge is very much an MS/Azure problem.

At least this incident gives me fuel for strongly suggesting that we turn unattended-updates off and darn well keep it off (obviously we need to keep alerts on, but we should install updates in an orderly manner, when we can monitor the results and smoke-test, preferably applying to test resources before uat/prod/other).